What rules protect my child's personal information online?

What the Law Says

The Children's Online Privacy Protection Act (COPPA) is the main federal law in the U.S. that protects children’s personal information collected online. It applies to operators of commercial websites and online services directed to children under 13—and to operators who knowingly collect personal information from children under 13.

COPPA gives parents control over what information is collected from their young children online. It requires operators to post clear privacy policies, obtain verifiable parental consent before collecting personal data, and allow parents to review or delete their child’s information.

The law defines key terms—including 'child', 'operator', and 'personal information'—to clarify who and what it covers. Enforcement is handled by the Federal Trade Commission (FTC), which can impose civil penalties for violations.

Statutory Text

The term 'child' means an individual under the age of 13.

— Children's Online Privacy Protection Act, 15 U.S.C. § 6501 — Definitions

Statutory Text

The term 'operator' means any person who operates a website located on the Internet or an online service and who collects or maintains personal information from or about the users of or visitors to such website or online service, or on whose behalf such information is collected or maintained.

— Children's Online Privacy Protection Act, 15 U.S.C. § 6501 — Definitions

Statutory Text

The term 'personal information' means individually identifiable information about an individual collected online, including: (i) a first and last name; (ii) a home or other physical address...

— Children's Online Privacy Protection Act, 15 U.S.C. § 6501 — Definitions

Sources